Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/323830343a386632633a3a2f33322d313238203d3e20323733343733.roa
File: 323830343a386632633a3a2f33322d313238203d3e20323733343733.roa (raw, json)
Hash identifier: 4f76JQjpEY1MaxVzPZBItpAd1UAWZ+zbAWnzj1jebE4=
Subject key identifier: D6:BC:F4:B9:9D:BE:11:5D:BF:8C:53:B1:FA:B4:81:E9:AA:D9:9F:8B
Certificate issuer: /CN=D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013
Certificate serial: 38CA2212FCDE6F42F269BD356796EED61BCBF8DE
Authority key identifier: D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/323830343a386632633a3a2f33322d313238203d3e20323733343733.roa
Signing time: Wed 26 Mar 2025 17:03:42 +0000
ROA not before: Wed 26 Mar 2025 16:58:42 +0000
ROA not after: Wed 25 Mar 2026 17:03:42 +0000
asID: 273473
IP address blocks: 2804:8f2c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ca:22:12:fc:de:6f:42:f2:69:bd:35:67:96:ee:d6:1b:cb:f8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013
Validity
Not Before: Mar 26 16:58:42 2025 GMT
Not After : Mar 25 17:03:42 2026 GMT
Subject: CN=D6BCF4B99DBE115DBF8C53B1FAB481E9AAD99F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:ed:cf:9c:0e:a2:f0:ca:94:e3:95:f0:b1:
f3:8e:e7:cc:c3:34:ec:f2:f8:67:67:26:56:c7:3e:
83:4f:7a:b9:7c:e2:39:08:5d:f6:b4:c5:83:e3:6b:
c1:5c:53:3d:b0:09:12:9e:3e:46:31:f9:a2:5e:0a:
cf:c9:b9:6f:09:80:83:fd:c5:12:18:9d:95:8c:80:
cb:1e:fb:6e:34:46:71:bb:85:0b:60:f5:df:ab:9e:
1f:6f:b3:78:a3:27:99:d2:06:23:87:4a:83:33:81:
e9:9b:4e:50:fe:4c:18:d8:3f:00:92:1a:4c:ca:0d:
a4:55:95:3b:9d:4b:3f:da:a3:09:af:c1:58:53:79:
67:d4:f0:65:17:a9:ce:d7:cf:83:ed:90:9c:57:c1:
9b:21:aa:4f:57:1f:5c:82:9c:85:b4:33:d8:26:81:
9c:80:b4:91:a7:f1:d9:f3:32:e8:4a:ca:79:91:a9:
7a:28:d2:f4:1a:cd:8e:ab:c6:5d:d3:be:5e:c2:3b:
9d:df:04:15:8b:49:77:84:63:1e:b7:d1:23:69:f0:
b7:90:55:60:b1:c5:7d:1b:dc:56:8b:de:bd:1e:47:
80:ab:b9:1b:74:19:47:84:e9:48:d9:e2:4e:7b:d7:
54:16:3f:6f:86:eb:e9:8f:6a:99:c9:f2:9e:d3:50:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:F4:B9:9D:BE:11:5D:BF:8C:53:B1:FA:B4:81:E9:AA:D9:9F:8B
X509v3 Authority Key Identifier:
keyid:D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/323830343a386632633a3a2f33322d313238203d3e20323733343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f2c::/32
Signature Algorithm: sha256WithRSAEncryption
3d:b5:04:ff:3f:00:07:1e:5b:21:3e:fa:59:ba:5c:0d:e5:1e:
62:64:16:1f:49:71:89:27:b9:76:30:51:8b:15:71:2e:d4:bb:
cf:f0:a5:f6:8f:e5:c4:53:9a:9d:a2:33:c2:0e:ba:41:88:a7:
0f:c5:48:67:65:fe:eb:3b:77:67:2a:1e:d7:1e:c9:0d:af:bf:
bd:f2:0e:ac:9b:54:f8:f9:fc:04:41:1f:6a:0a:8f:05:83:1c:
2f:01:75:e0:85:dd:b7:8e:db:01:d9:f8:1e:e4:5c:2a:d7:ee:
8d:ec:ee:33:ca:75:01:99:b9:19:86:5c:1b:4c:57:06:84:ae:
30:f3:23:e6:40:0c:a3:5c:82:b4:33:b8:36:fe:0b:62:44:3d:
8b:97:57:85:48:71:b4:84:a9:91:ba:8d:c7:bb:e1:e9:d3:70:
51:59:0c:b3:d5:a1:aa:f0:ca:8d:fe:ce:be:e8:99:f8:46:de:
bd:3d:11:aa:02:ec:a5:67:69:18:15:4d:56:ad:bc:5f:98:52:
e5:77:83:e4:16:b4:35:a1:db:98:9e:da:58:20:56:20:17:8f:
33:c3:0a:5b:61:c3:5d:94:b5:1c:3d:d6:e2:f4:78:c0:ca:83:
13:0b:45:8f:75:6f:7b:78:d7:5c:b5:6a:20:2a:05:eb:c1:49:
14:47:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:55 2025 by rpki-client